Policy
Privacy
Last updated October 2, 2026 · Version 2026.10
We collect only what you choose to send us, use it only to reply and to support student-athletes, and never sell it or use it for advertising. You can see, correct or delete it at any time.
1. Who we are
This website is operated by the ISI Academy Foundation (“the Foundation”, “we”, “us”), the charitable partner of ISI Academy. The Foundation decides how the information described here is used. Questions about privacy go to info@isiacademy.info.
2. What we collect
Information you give us
- Contact and offers of help: name, email address, organization (optional), the kind of help or gift you have in mind, and your message.
- Privacy requests: the request you make, your name and email, and — if you act for someone else — their name.
- Email: whatever you choose to write if you email us directly.
Information collected automatically
Our host processes standard request data — IP address, browser and device type, the page requested and the time — to deliver pages and protect the site from abuse. We use IP addresses briefly to limit how often a form can be sent, and never to identify or profile you.
Cookies and similar technology
One first-party cookie remembers your cookie choice; display settings you pick in the accessibility panel are kept in your own browser and never sent to us. Optional analytics run only if you switch them on. There is no advertising, social-media tracking, fingerprinting or session recording. See the Cookie Notice.
What we do not collect
We do not take payments on this website, and we do not ask for or want sensitive information — health, financial, government ID, precise location, or anything about a student’s education records. Please don’t send it.
3. How we use it, and why
| Purpose | Legal basis (where the law asks) |
|---|---|
| Reading and answering your message; following up on the help you offered | Your request, and our legitimate interest in replying |
| Handling a privacy or accessibility request | Legal obligation |
| Keeping the site secure and preventing spam | Legitimate interest |
| Counting visits in aggregate (only if you opt in) | Your consent, which you can withdraw at any time |
| Keeping gift records, once the Foundation accepts gifts | Legal obligation (tax and accounting) |
We do not sell personal information, share it for cross-context behavioural advertising, use it for automated decisions with legal effects, or add you to a mailing list without asking. If we ever send updates you asked for, every message will carry a one-click unsubscribe.
4. Who we share it with
Only the service providers that run the site for us, under contract and on our instructions:
| Provider | What they do | Data | Where |
|---|---|---|---|
| Vercel Inc. | Website hosting and content delivery | Request data (IP address, browser, page requested) for delivery and security | United States, with global edge locations |
| Resend (not active today) | Delivers form submissions to our inbox | What you type into a form | United States |
| Google LLC (Tag Manager and Analytics 4) | Aggregate visit statistics — only if you switch Analytics on | Pseudonymous visit data (pages viewed, device type, approximate region); Google uses the IP address for approximate location and states that GA4 does not log or store it | United States |
We also share information with ISI Academy only where your message is meant for it, and we may disclose information if the law requires it or to protect the safety of a student or anyone else.
5. How long we keep it
| Record | How long |
|---|---|
| Messages and offers of help sent through a form or email | Up to 3 years after our last exchange, then deleted |
| Gift records (once the Foundation accepts gifts) | 7 years, as tax and accounting law requires |
| Privacy requests and our response | 24 months, as California regulations require |
| Accessibility reports | Until resolved, then 24 months as a record of the fix |
| Hosting request logs | Kept by our host for a short rolling window (days, not months) |
| Analytics data (only if you opted in) | 14 months in Google Analytics, then deleted automatically |
| Your cookie and display choices | Stored only in your own browser, up to 12 months |
6. Your rights and choices
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy in a portable format;
- correct anything that is wrong;
- delete it;
- stop using it for a purpose you object to, or stop contacting you;
- opt out of any sale, sharing or targeted advertising (we do none of these, and we record your opt-out anyway).
Use Your Privacy Choices or email info@isiacademy.info. We confirm receipt within 10 business days and respond within 45 days (we’ll tell you if we need up to 45 more, and why). To protect you, we may ask you to confirm details before we share or delete anything; we only ask for what we need to match the request to our records. You can use an authorized agent, and a parent or guardian can act for a child. It is free, and we will never treat you differently for using these rights.
Global Privacy Control and Do Not Track. If your browser sends a Global Privacy Control signal, we treat it as a valid opt-out of sale, sharing and targeted advertising for that browser, automatically, and show you that we did. We do not track you across sites, so Do Not Track has nothing to switch off — we respect it by design.
If we decline a request, we will explain why and how to appeal. Send an appeal to info@isiacademy.info with “Appeal” in the subject; we answer within 45 days. If you are not satisfied you may contact your state attorney general (or, in California, the California Privacy Protection Agency).
7. California and other US states
This section gives the disclosures required by the California Consumer Privacy Act (as amended by the CPRA) and the comparable laws of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. Several of these laws do not apply to non-profits; we follow them anyway.
- Categories collected in the last 12 months: identifiers (name, email, IP address); internet activity (pages requested, and analytics if you opt in); and the content of messages you send. Source: you, and your browser.
- Sensitive personal information: none sought or used. We do not use any to infer characteristics about you.
- Sold or shared: none, ever. We have no actual knowledge of selling or sharing the information of anyone under 16.
- Disclosed for a business purpose: identifiers and message content to the service providers listed above.
- Shine the Light (Civil Code §1798.83): we do not share personal information with third parties for their direct marketing.
- Minors in California (Business & Professions Code §22581): anyone under 18 can ask us to remove content they posted or sent; email info@isiacademy.info.
8. Visitors outside the United States
The site is run from the United States and information is processed there. If you are in the European Economic Area, the United Kingdom or Switzerland, you have the rights in section 6 under the GDPR / UK GDPR, plus the right to restrict processing and to complain to your local data-protection authority. Where we rely on consent you can withdraw it at any time without affecting what happened before. We use US providers that offer the European Commission’s standard contractual clauses or Data Privacy Framework certification for these transfers.
9. Children and students
The Foundation exists for young people, but this website is written for parents, supporters and partners. It is not directed to children under 13 and we do not knowingly collect their personal information; that is what the Children’s Online Privacy Protection Act (COPPA) requires. If you believe a child has sent us information, tell us and we will delete it promptly. A parent or guardian can always see or delete their child’s information. We do not use students’ photographs or names for marketing without the written permission of a parent or guardian, and we never sell or share students’ information.
10. Donors
We will never sell, rent, trade or share a donor’s name or contact details with any other organization, or send mailings on another organization’s behalf. Donors may ask to give anonymously, and may ask at any time to see their records or be removed from our lists. This website does not process payments; if we use a payment processor in future, your card details will go straight to that processor under its own security standards (PCI DSS) and never to us.
11. Security
The site is served only over HTTPS with modern security headers and a strict content-security policy. Forms are validated and delivered by email rather than stored in a website database, and access to our inbox is limited to the people who need it. No method is perfectly secure; if we ever learn of a breach affecting your information, we will notify you and the authorities as the law requires. Found a security issue? See our security contact.
12. Changes and contact
If we make a material change, we will update this page, the version and the date at the top, and — where the law requires — ask again before relying on your consent. Previous versions are available on request. Contact info@isiacademy.info. This notice is available in other formats (large print, plain text, read aloud) on request.